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1 

CDMA TRANSMISSION OF PACKET-SWITCHED DATA 

FIELD OF THE INVENTION 

5 The present invention relates generally to wireless telecommunications, 

and specifically to data transmission over advanced cellular communications 
networks. 

BACKGROUND OF THE INVENTION 

10 

The Global System for Mobile (GSM) telecommunications is used in 
cellular telephone networks in many countries around the world. GSM offers a 
useful range of network services and standards, including facilities for data, as 
well as voice, transmission. Existing GSM networks are based on time-division 

15 multiple access (TDMA) digital communications technology. 

Code-division multiple access (CDMA) is an improved digital 
communications technology, which affords more efficient use of radio 
bandwidth than TDMA, as well as a more reliable, fade-free link between 
cellular telephone subscribers and base stations. The leading CDMA standard 

20 is IS-95, promulgated by the Telecommunications Industry Association (TIA). 

PCT patent application PCT/US96/ 20764, which is incorporated herein 
by reference, describes a wireless telecommunications system that uses a 
CDMA air interface (i.e., basic RF communications protocols) to implement 
GSM network services and protocols. Using this system, at least some of the 

25 TDMA base stations (BSSs) and subscriber units of an existing GSM network 
would be replaced or supplemented by corresponding CDMA equipment. 
CDMA BSSs in this system are adapted to communicate with GSM mobile 
switching centers (MSCs) via a standard GSM A-interface. The core of GSM 
network services is thus maintained, and the changeover from TDMA to 

30 CDMA is transparent to users. 

Hybrid cellular communications networks, incorporating both GSM and 
CDMA elements, are also described in PCT patent publications WO 95/24771 
and WO 96/21999, and in an article by Tscha, et al., entitled "A Subscriber 
Signaling Gateway between CDMA Mobile Station and GSM Mobile Switching 

35 Center," in Proceedings of the 2nd International Conference on Universal 
Personal Communications, Ottawa (1993), pp. 181-185, which are incorporated 
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herein by reference. None of these publications deals with specific issues of 
data communications. Such issues include both the need for protocol 
compatibility and the different demands of voice and data communications. 
Although TIA has promulgated standards of CDMA over-the-air data 
5 transmission, such as IS-657 and IS-707, the GSM BSS-MSC interface is not 
suited to support such transmission. 

Generally speaking, because GSM was developed primarily for circuit- 
switched transmission, it is not well suited for packet-switched data, as is 
commonly transmitted over the Internet. For this reason, the European 

10 Telecommunications Standards Institute (ETSI) has proposed a general packet 
data service (GPRS) to operate in conjunction with GSM cellular networks. 
GPRS is described in a number of GSM standards, including 02.60, 03.60 and 
03.64, which are incorporated herein by reference. 

When a subscriber unit (or mobile station - MS) in a GSM network with 

15 GPRS wishes to send and/or receive packet-switched data, the MS through the 
BSS with which it is in communication makes contact with a "serving GPRS 
support node" (SGSN), over a GSM-standard Gb interface. The data are 
transmitted and received by the BSS through the SGSN, separately from the 
voice channels that go through the MSC, to a packet data network (PDN), such 

20 as the Internet. The SGSN likewise maintains its own separate mobility 
management and security facilities. Unlike GSM-TDMA voice 
communications, GPRS allows dynamic time slot allocation in the air interface 
between the subscriber units and the SGSN. 

25 

SUMMARY OF THE INVENTION 

It is an object of the present invention to provide methods and apparatus 
for conveying packet-switched data through a cellular communications 
30 network. 

In some aspects of the present invention, the data are conveyed over a 
CDMA air interface. 

In other aspects of the present invention, the data are conveyed in the 
network in accordance with GSM standards, and particularly with the 
35 proposed GPRS standard. 
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In preferred embodiments of the present invention, a mixed 
GSM /CDMA cellular communications system includes one or more CDMA 
base stations (BSSs), controlled by a GSM mobile switching center (MSC). 
Systems of this type are described in a U.S. patent application entitled "Base 
5 Station Handover in a Hybrid GSM/CDMA Network," filed July 20, 1998, 
which is assigned to the assignee of the present patent application and is 
incorporated herein by reference. A subscriber unit in the system, referred to 
herein as a mobile station (MS), which is in communication with one of the 
CDMA BSSs over a CDMA air interface, transmits and receives packet-switched 

10 data through the system via the CDMA BSS. The MS and the CDMA BSS are 
adapted to operate substantially in accordance with GSM data networking and 
signaling protocols. The data transmitted and received by the MS preferably 
include Internet protocol (IP) data, but other types of data may similarly be 
conveyed. The term "data" as used in the context of the present patent 

15 application and in the claims refers to substantially all types of data that are 
typically conveyed through packet-switched networks, which may even include 
voice transmission, as is known in the art. 

In some preferred embodiments of the present invention, the system 
includes a GPRS network, with which the CDMA BSS communicates, in 

20 accordance with GPRS data networking and signaling standards. Preferably, 
the CDMA BSS and MS communicate with a SGSN associated with the GPRS 
network via a standard GSM/GPRS Gb interface. Signaling and data 
transmission over a CDMA Um interface between the MS and BSS are adapted 
to support GSM /GPRS protocols operating over the Gb interface, which is 

25 substantially unmodified. 

In other preferred embodiments of the present invention, the CDMA BSS 
has a direct interface to a packet-switching network, such as the Internet. A 
network service node, preferably a service control point (SCP) functioning as a 
operator-specific service (OSS) node, is coupled between the GSM MSC and the 

30 CDMA BSS. The MSC controls services such as authentication, ciphering and 
billing, preferably through the SCP using a OSS interface, for example, the 
CAMEL (customized applications for mobile network enhanced logic) interface 
as has been proposed by ETSI. 

There is therefore provided, in accordance with a preferred embodiment 

35 of the present invention, a method for conveying packet data between a mobile 
station and a GSM network, including: 
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communicating with a GSM service node to establish a data link between 
the mobile station and the network via a radio communications base station; 

conveying the packet data between the mobile station and the base 
station over a CDMA air interface; and 
5 transferring the data over the link between the base station and the 

network. 

Preferably, communicating with the node includes communicating with 
a GPRS node, and transferring the data includes transferring the data via the 
GPRS node, wherein communicating with the GPRS node includes 

10 communicating with a SGSN via a GSM Gb interface. Further preferably, 
conveying the data includes mapping GPRS frames onto the CDMA air 
interface, wherein mapping the GPRS data frames includes using a CDMA 
radio link control to support a GPRS logical link control. 

In a preferred embodiment, transferring the data includes transferring 

15 data as a GSM operator-specific service, wherein communicating with the node 
includes communicating with a GSM service control point, which 
communicates with a switching center via a GSM operator-specific service 
interface. Preferably, the mobile station communicates with a home location 
register via a GSM unstructured supplementary service data interface. 

20 Alternatively, the service control point communicates with a switching center 
via a GSM customized applications for mobile network enhanced logic 
interface. 

Preferably, the method includes handing over the mobile station from 
the base station to another base station, wherein transferring the data over the 
25 link includes routing data to the other base station using Mobile IP. 

Preferably, communicating with the service node includes 
communicating with a switching center via a GSM A-interface. 

In a preferred embodiment, transferring the data includes transferring 
data directly between the base station and the network, substantially without 
30 passing the data through the service node. 

Preferably, communicating with the service node includes providing 
GSM authentication of the mobile station for a call made over the CDMA air 
interface. 

Further preferably, conveying the data includes conveying data over a 
35 CDMA air interface based substantially on an IS-95 interface standard. 
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In a preferred embodiment, conveying the data includes conveying data 
at a variable rate, responsive to a data volume to be conveyed over the air 
interface, wherein conveying the data preferably includes opening a 
fundamental channel for conveying the data and signaling thereover, and 
5 responsive to the data volume opening one or more supplemental channels 
between the mobile station and the base station to carry the data. Preferably, 
opening the supplemental channels includes opening a different number of 
channels in forward and reverse directions between the mobile station and the 
base station. Alternatively or additionally, one or more of the supplemental 
10 channels are closed in response to a decrease in the data rate. 

Preferably, conveying the data includes conveying data using IS-657 and 
IS-707 CDMA packet data service. 

There is further provided, in accordance with a preferred embodiment of 
the present invention, wireless communications apparatus, for use in a mobile 
15 telecommunications system, including: 

a mobile station, which is coupled to exchange data with terminal 
equipment, and which initiates a call to convey the data over a CDMA air 
interface; and 

a base station, which communicates with a GSM network service node to 
20 establish a data link responsive to the call initiated by the mobile station, and 
which conveys the data between the mobile station and the network over the 
data link. 

Preferably, the service node includes a GPRS node, and wherein the base 
station transfers the data via the GPRS node using a GPRS communications 

25 protocol, wherein the GPRS node includes a SGSN, with which the base station 
communicates via a GSM Gb interface. 

In a preferred embodiment, the data are transferred over the data link as 
a GSM operator-specific service, wherein the GSM network node preferably 
includes a GSM service control point, which communicates with a switching 

30 center via an operator-specific service interface. Alternatively, the mobile 
station communicates with a home location register via a GSM unstructured 
supplementary service data interface. Further alternatively, the service control 
point communicates with a switching center via a GSM customized applications 
for mobile network enhanced logic interface. Preferably, the data link includes 

35 a direct connection between the base station and the network, wherein the data 
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are transferred over the direct connection substantially without passing through 
the service node. 

Preferably, the air interface is based substantially on an IS-95 CDMA air 
interface standard, and the air interface operates substantially in accordance 
5 with IS-657 and IS-707 CDMA packet data service. 

The present invention will be more fully understood from the following 
detailed description of the preferred embodiments thereof, taken together with 
the drawings in which: 

BRIEF DESCRIPTION OF THE DRAWINGS 

10 

Fig. 1 is a schematic block diagram of a hybrid GSM/CDMA cellular 
communications system, in accordance with a preferred embodiment of the 
present invention; 

Figs. 2A and 2B are schematic block diagrams illustrating 
15 communications protocol stacks between elements of the system of Fig. 1, in 
accordance with a preferred embodiment of the present invention; 

Fig. 3 is a schematic block diagram of a hybrid GSM/CDMA cellular 
communications system, in accordance with another preferred embodiment of 
the present invention; 
20 Fig- 4 is a schematic signaling diagram, illustrating communication 

procedures involving elements of the system of Fig. 3, in accordance with a 
preferred embodiment of the present invention; and 

Fig. 5 is a schematic block diagram of a hybrid GSM/CDMA cellular 
communications system, in accordance with still another preferred embodiment 
25 of the present invention. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

Reference is now made to Fig. 1, which is a schematic block diagram of a 
30 hybrid GSM /CDMA cellular communications system 20, in accordance with a 
preferred embodiment of the present invention. System 20 is built around a 
public land mobile network (PLMN) 22, which is based on the GSM 
communications standard, as is known in the art and described briefly 
hereinabove. Infrastructure for such networks already exists and is in wide use 
35 in many countries, and the present invention has the advantage of enabling 
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gradual introduction of CDMA service is conjunction with such a network 
without requiring major changes to the existing infrastructure. 

PLMN 22 comprises at least one mobile-services switching center (MSC) 
24, or possibly a number of such centers (although only one MSC is shown here 
for clarity of illustration), which controls network operations within a 
geographical area. Among other functions, MSC 24 is responsible for location 
registration of subscriber units and handover of subscriber units between base 
stations, as well as linking PLMN 22 to a public switched telephone network 
(PSTN) and /or packet data network (PDN) 48 for circuit-switched data. The 
PLMN also comprises a network management center (NMC) 26 and a cell 
broadcast center (CBC) 28. The functions of these elements, as well as other 
aspects of system 20 and details regarding a mobile station (MS) 40 in the 
system, are described further in the above-mentioned U.S. and PCT Patent 
Applications. 

System 20 includes a plurality of MSs 40, which communicate with 
PLMN 22 via a plurality of base station subsystems (BSS) 30 and 32 over a 
wireless RF link at one or more of the accepted cellular communications 
frequencies. MS 40, which is also known as a subscriber unit, is preferably 
capable of communicating with both GSM BSS 30, using a standard GSM 
TDMA communication protocol, and CDMA BSS 32, using CDMA-based 
communication methods described hereinbelow. Although for the sake of 
clarity, only one each of MS 40, GSM BSS 30 and CDMA BSS 32 is shown in Fig. 
1, it will be understood that in actuality, system 20 typically comprises a 
plurality of each of these system elements. 

Both GSM BSS 30 and CDMA BSS 32 communicate with and are 
controlled by MSC 24, substantially in accordance with GSM standards, via the 
GSM standard A-interface. Signaling and data communications between BSS 32 
and MSC 24 are further described in the above-mentioned U.S. Patent 
Application entitled "Base Station Handover in a Hybrid GSM/CDMA 
Network," and in another U.S. Patent Application, filed on even data, entitled 
"Transmission of GSM Circuit-Switched Data over a CDMA Link." These 
applications are assigned to the assignee of the present patent application and 
are incorporated herein by reference. 

BSS 32 is also linked to a general packet data service (GPRS) network 50, 
as has been proposed by the European Telecommunications Standards Institute 
(ETSI). The GPRS includes a SGSN 52, which communicates in both signaling 
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and data transmission planes with BSS 32. Hie SGSN effectively takes the place 
of MSC 24 when MS 40 asks to transmit or receive packet data via the BSS, 
rather than voice traffic. In accordance with GPRS standards, SGSN 52 
communicates with PDN 48 via a "gateway GPRS serving node" (GGSN) 54. 
Communication protocols between MS 40, BSS 32 and SGSN 52 are described 
below with reference to Figs. 2A and 2B. 

Communications between CDMA BSS 32 and MS 40 are based on a 
CDMA radio "air interface," which is preferably based on the IS95 standard for 
CDMA communications, and most preferably on the TIA/EIA-95-B version of 
the standard. BSS 32 is built around a base station controller (BSC) 34, which 
controls and communicates with a number of base station transceivers (BTS) 36. 
Each BTS transmits RF signals to and receives RF signals from MS 40 when the 
MS is within a geographical area, or cell, served by the particular BTS. On the 
other hand, when MS 40 is within a cell served by GSM BSS 30, the MS 
preferably communicates with BSS 30 over a GSM/TDMA air interface. It will 
be understood, however, that the principles of the present invention apply 
generally to communication of data over the CDMA air interface between MS 
40 and CDMA BSS 32 (and from there to SGSN 52); and it is not essential that 
MS 40 have the capability of TDMA communications with GSM BSS 30, as well. 

In order to sustain both of these interfaces, MS 40 comprises mobile 
equipment (ME) 42, which preferably includes either two radio transceivers, 
one configured for TDMA operation and one for CDMA, or a single transceiver 
which can dynamically switch between TDMA and CDMA. The MS includes 
mobile termination (MT), which supports terminal equipment (TE) 46 for data 
input and output, including packet data. Preferably, TE 46 comprises a user 
terminal, such as a personal computer, which is coupled to input and output 
data via ME/MT 42. In addition, MS 40 comprises a subscriber identity module 
(SIM) 44, in accordance with GSM standards. 

Fig. 2A is a block diagram that schematically illustrates protocol stacks 
used in signaling interfaces between MS 40, CDMA BSS 32 and SGSN 52, in 
accordance with a preferred embodiment of the present invention. These 
interfaces enable MS 40 to communicate with GSM SGSN 52 over a CDMA air 
interface between the MS and BSS 32. If and when MS 40 is in communication 
with SGSN 52 via GSM BSS 30, the protocol stacks are in accordance with GPRS 
standards, substantially without modification thereto. 
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Regardless of whether MS 40 is communicating via CDMA BSS 32 or 
GSM BSS 30, upper-level communications between MS 40 and SGSN 52 are 
preferably conducted using a logical link control (LLC) layer, as specified by 
GSM standard 04.64, which is incorporated herein by reference. This layer 
5 provides a reliable ciphered logical link, which is independent of the 
underlying CDMA or TDMA radio protocols, so that generally no changes, or 
only minimal changes, are required in GPRS 50 relative to the GSM standard. 
Similarly, mobility management functions are preferably supported by a GSM 
GPRS mobility management and session management (GMM/SM) protocol 

10 layer, in accordance with GSM standard 03.60, which is also incorporated 
herein by reference. This layer provides functions such as GPRS attach, GPRS 
detach, security, routing area update, location update and packet data protocol 
(PDP) context activation and de-activation, as described in the GSM standard. 

MS 40 communicates with CDMA BSS 32 over a CDMA Urn interface, 

15 based on the CDMA IS-95 air interface, which is modified to support GSM and 
GPRS signaling standards. The CDMA air interface between MS 40 and CDMA 
BSS 32 comprises CDMA Layer 1, which operates on a standard IS-95 protocol, 
and a GSM-CDMA radio link control (RLC), in which IS-95 operation is 
adapted to support the GPRS LLC and GMM/SM layers above it in the stack. 

20 The RLC layer includes a medium access control (MAC) function associated 
with the RLC layer, which controls access signaling (request and grant) for 
CDMA radio channels and mapping of GSM LLC data frames onto the CDMA 
physical channel. From the point of view of the GPRS LLC and GMM/SM 
layers above it, the GSM-CDMA RLC preferably emulates the GSM-TDMA RLC 

25 as specified in GSM standard 04.64, which is incorporated herein by reference. 
The upper layers (GPRS LLC and GMM/SM) are not processed by BSS 32, but 
are rather relayed through between MS 40 and SGSN 52 for processing in a 
manner substantially transparent to the CDMA air interface layers below. 

CDMA BSS 32 communicates with SGSN 52 over a standard, 

30 substantially unmodified GSM /GPRS Gb interface. This interface preferably 
includes GSM LI bis, network service and BSS GPRS protocol (BSSGP) layers. 
The network service and LI bis layers are preferably defined in accordance with 
the GSM 08.16 standard, and the BSSGP layer is preferably defined in 
accordance with the GSM 08.18 standard, which standards are incorporated 

35 herein by reference. The BSSGP layer conveys routing and information related 
to quality of service (QoS) between BSS 32 (or BSS 30) and SGSN 52. The 
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network service layer transports BSSGP packet data units (PDUs), based on the 
frame relay connection between the BSS and the SGSN, which may traverse a 
network of frame relay switching nodes. BSS 32 translates CDMA Layer 1 and 
GSM-CDMA RLC protocols exchanged between the BSS and MS 40 into 
5 appropriate LI bis, network service and BSSGP protocols for transmission to 
SGSN 52, and vice versa. 

Because CDMA BSC 34 communicates with SGSN 52 over the standard 
Gb interface, substantially no modifications are required in the core GPRS 50 in 
order to enable the addition of CDMA BSS 32 to the GPRS network. 

10 Furthermore, GPRS 50 need not be aware that there is any difference in identity 
between GSM /TDM A BSS 30 and CDMA BSS 32, since both communicate with 
SGSN 52 in a substantially identical manner over the Gb interface. 

Fig. 2B is a block diagram that schematically illustrates protocol stacks 
involved in transmitting data between MS 40 and GGSN 54 via CDMA BSS 32 

15 and SGSN 52, in accordance with a preferred embodiment of the present 
invention. ME/MT 42 exchanges data with TE 46 via any suitable physical 
interface and high-level networking protocol known in the art, for example, an 
Internet protocol (IP) or an X.25 protocol. The networking protocol is relayed 
through BSS 32, SGSN 52 and GGSN 54 to a corresponding host coupled to 

20 PDN48. 

Network level transmissions (such as IP and X.25) between MS 40 and a 
corresponding relay layer in SGSN 52 are supported by a sub-network 
dependent convergence protocol (SNDCP), preferably as specified by GSM 
standard 04.65, which is incorporated herein by reference. The SNDCP layer 

25 maps the upper, networking-level protocol onto the GPRS LLC layer, which is 
described hereinabove with reference to Fig. 2A. LLC data packets received by 
SGSN 52 from MS 40 are translated by the SGSN into TCP or UDP packets. 
TCP is generally used when a reliable data link, such as X.25, is required 
between MS 40 and GGSN 54; and UDP is used when such reliability is not 

30 required, as in IP transmission. TCP and UDP are well known in the art, and 
are respectively defined, for example, in RFC 793 and RFC 768 of the Internet 
Engineering Task Force (IETF), which documents are incorporated herein by 
reference. The TCP or UDP packets at SGSN 52 are encapsulated by a GPRS 
tunneling protocol (GTP) layer for transmission to GGSN 54, preferably as 

35 specified by GSM standard 09.60, which is also incorporated herein by 
reference. 
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As described hereinabove with reference to Fig. 2 A, the RLC/MAC layer 
provides reliable support for transmission of GSM-standard data packets 
generated by the upper-level networking functions of MS 40 (and SGSN 52) 
over the CDMA Layer 1 air interface between MS 40 and BSS 32. Mapping of 
5 GPRS LLC frames onto the CDMA physical channel, as well as access signaling 
procedures, are performed by the MAC function. BSS 32 uses the BSSGP layer 
to convey the information from the RLC/MAC layer to SGSN 52, which 
translates this information into IP data for transmission to GGSN 54. Lower 
layers LI and L2 in SGSN 52 may comprise any suitable data communication 

10 protocols known in the art. 

Although the communications protocol layers above are described 
generally with reference to functions required to adapt a signaling and data 
stream from MS 40 for transport to GPRS 50, it will be understood that the same 
protocol layers are also used to adapt signaling and data from GPRS 50 for 

15 transport to MS 40 and output by TE 46. The GPRS thus transmits and receives 
data to and from TE 36 via ME/MT 42 and BSS 32 as though MS 40 were 
operating in GSM /TDM A mode, substantially without regard to the fact that 
the data conveyed between the BSS and the MS are CDMA-encoded. 

In a preferred embodiment of the present invention, when a data rate 

20 between TE 46 and ME/MT 42 exceeds CDMA traffic channel rates, a feature of 
IS-95 known as medium data rate (MDR) transmission is used to accommodate 
the excess data, under the control of the MAC function described hereinabove. 
In this case, MS 40 and BSS 32 open multiple traffic channels between them. 
Since there is frequently a greater volume of data being transported in one 

25 direction than in the other (most frequently in a forward direction, i.e., from 
BSS 32 to MS 40) the number of channels opened in the two directions need not 
be equal. For example, there may be four forward channels and only two 
reverse channels opened. In each direction, there is preferably one fundamental 
code traffic channel, which carries signaling (Fig. 2A) along with data, and up 

30 to seven supplemental code traffic channels for high-speed data. The 
fundamental channel is active substantially continuously, whereas the 
supplemental channels are activated as needed based on the total data rate at 
any time. The use of MDR for transmission of GSM high-speed circuit-switched 
data (HSCSD) is similarly described in the above-mentioned U.S. Patent 

35 Application entitled "Transmission of GSM Circuit- Switched Data over a 
CDMA Link." 



WO 00/13441 



PCT/US99/19809 



12 

Fig. 3 is a schematic block diagram illustrating a hybrid GSM/CDMA 
cellular communications system 21, in accordance with an alternative preferred 
embodiment of the present invention. System 21 is similar to system 20, shown 
in Fig. 1, except that in system 21, CDMA-standard data communications, 
5 preferably based on IS-707, are offered as a GSM operator-specific service, i.e., a 
packet data transfer service that is not specifically defined or supported by 
GSM network specification. In this case, packet data from MS 40, preferably in 
the form of IP data, are conveyed to PDN 48 directly by GSM-CDMA BSCs 34, 
rather than through GPRS 50. (System 21 may or may not include a GPRS, 

10 independent of the direct IP packet data link shown in Fig. 3.) PDN 48 
preferably comprises the Internet or is connected to the Internet, although the 
architecture of system 21 may similarly be used to link MS 40 to other types of 
data networks known in the art, such as LANs, WANs and "intranets." The 
data are preferably conveyed between MS 40 and BSSs 32 in accordance with 

15 the IS-657 and IS-707 CDMA standards mentioned hereinabove. 

A router associated with PDN 48 routes IP messages for MS 40 via 
whichever BSC 34 is in communication with the MS. Preferably, when MS 40 is 
handed over from one BSC to another, the PDN is informed of the handover 
and re-routes the IP messages to the new BSC based on the Mobile IP standard. 

20 The Mobile IP standard is defined in RFCs of the IETF, specifically including 
RFCs 2002, 2003 and 2004, which are incorporated herein by reference. 

A GSM service node, known as a service control point (SCP) 58, 
communicates with BSCs 34 and with MSC 24 so as to enable the MSC to 
control access of MS 40 to system 21 and to handle network services, such as 

25 billing, in connection with the packet data transmission through the BSCs. SCP 
58 communicates with MSC 24 via a GSM operator-specific service (OSS) 
interface. BSS 32 thus has several interfaces that are used to support data 
transfer between MS 40 and PDN 48: 

• CDMA air interface between BTS 36 and MS 40; 
30 • IP interface to PDN 48; 

• GSM A-interface to MSC 24; and 

• a proprietary interface to SCP 58. 

Fig. 4 is a schematic signaling diagram, illustrating procedures involved 
between elements of system 21, shown in Fig. 3A, in conveying IP traffic 
35 between MS 40 and PDN 48, in accordance with a preferred embodiment of the 
present invention. When MS 40 has data to send, it initiates a GSM call to BSS 
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32, which accordingly contacts MSC 24 to request call initiation. MSC 24 
authenticates MS 40 and sets a ciphering mode (if applicable), in accordance 
with GSM standards, and then consults SCP 58 in order to proceed with the 
call. The SCP then notifies BSS 32 that it is allowed to proceed with the call. At 
5 this point, the BSS allows MS 40 to send and receive IP data packets to and from 
MS 40, in accordance with IS-657 and IS-707, and conveys the packets to PDN 
48, and back from the PDN to the MS. 

When MS 40 has finished sending and receiving data, it notifies BSS 32, 
which accordingly sends a request to SCP 58 and/or MSC 24 to release the call. 
10 The BSS then transfers billing information relating to the call to SCP 58, which 
passes the information on to MSC 24 or directly to a billing system associated 
with PLMN 22. 

In an alternative preferred embodiment of the present invention, SCP 58 
communicates with MSC 24 via a GSM CAMEL (customized applications for 

15 mobile network enhanced logic) interface, rather than the OSS interface 
described hereinabove. CAMEL, although still in development, is intended to 
provide a standardized framework for such communications, in place of the 
proprietary OSS interface. CAMEL is defined in GSM standards 02.78, 03.78 
and 09.78, which are incorporated herein by reference. 

20 Fig- 5 schematically illustrates a hybrid GSM/CDMA cellular 

communications system 23 in accordance with still another preferred 
embodiment of the present invention. In system 23, BSCs 34 are linked to PDN 
48 as shown in Fig. 3, but SCP 58 is linked and conveys service data to a home 
location register (HLR) 60 associated with PLMN 22, rather than to MSC 24. In 

25 this case, MS 40 conveys unstructured supplementary service data (USSD) to 
the HLR, as indicated by dashed lines in Fig. 5, and the HLR communicates 
with the SCP via a suitable proprietary interface. 

Although preferred embodiments are described hereinabove with 
reference to a particular hybrid GSM/CDMA system, it will be appreciated that 

30 the principles of the present invention may similarly be applied to effect over- 
the-air data transfer in other hybrid communication systems, as well. Similarly, 
although the systems and methods described hereinabove make specific 
reference to IP packet data transfer, they may also be used for other modes and 
standards of data communications. The scope of the present invention 

35 encompasses not only the complete systems and communications processes 
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described hereinabove, but also various innovative elements of these systems 
and processes, as well as combinations and sub-combinations thereof. 

It will thus be appreciated that the preferred embodiments described 
above are cited by way of example, and the full scope of the invention is limited 
5 only by the claims. 
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CLAIMS: 

1. A method for conveying packet data between a mobile station and a 
2 GSM network, comprising: 

communicating with a GSM service node to establish a data link between 
4 the mobile station and the network via a radio communications base station; 

conveying the packet data between the mobile station and the base 
6 station over a CDMA air interface; and 

transferring the data over the link between the base station and the 
8 network. 

2. A method according to claim 1, wherein communicating with the node 
2 comprises communicating with a GPRS node, and wherein transferring the data 

comprises transferring the data via the GPRS node. 

3. A method according to claim 2, wherein communicating with the GPRS 
2 node comprises communicating with a SGSN via a GSM Gb interface. 

4. A method according to claim 2, wherein conveying the data comprises 
2 mapping GPRS frames onto the CDMA air interface. 

5. A method according to claim 4, wherein mapping the GPRS data frames 
2 comprises using a CDMA radio link control to support a GPRS logical link 

control. 

6. A method according to claim 1, wherein transferring the data comprises 
2 transferring data as a GSM operator-specific service. 

7. A method according to claim 6, wherein communicating with the node 
2 comprises communicating with a GSM service control point, which 

communicates with a switching center via a GSM operator-specific service 
4 interface. 

8. A method according to claim 7, wherein the mobile station 
2 communicates with a home location register via a GSM unstructured 

supplementary service data interface. 



WO 00/13441 



PCT/US99/19809 



16 

9. A method according to claim 7, wherein the service control point 
2 communicates with a switching center via a GSM customized applications for 

mobile network enhanced logic interface. 

10. A method according to claim 6, and comprising handing over the mobile 
2 station from the base station to another base station, wherein transferring the 

data over the link comprises routing data to the other base station using Mobile 
4 IP. 

11. A method according to claim 1, wherein communicating with the service 
2 node comprises communicating with a switching center via a GSM A-interface. 

12. A method according to claim 1, wherein transferring the data comprises 
2 transferring data directly between the base station and the network, 

substantially without passing the data through the service node. 

13. A method according to claim 1, wherein communicating with the service 
2 node comprises providing GSM authentication of the mobile station for a call 

made over the CDMA air interface. 

14. A method according to claim 1, wherein conveying the data comprises 
2 conveying data over a CDMA air interface based substantially on an IS-95 

interface standard. 

15. A method according to claim 14, wherein conveying the data comprises 
2 conveying data at a variable rate, responsive to a data volume to be conveyed 

over the air interface. 

16. A method according to claim 15, wherein conveying the data comprises 
2 opening a fundamental channel for conveying the data and signaling thereover, 

and responsive to the data volume opening one or more supplemental channels 
4 between the mobile station and the base station to carry the data. 

17. A method according to claim 16, wherein opening the supplemental 
2 channels comprises opening a different number of channels in forward and 

reverse directions between the mobile station and the base station. 
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18. A method according to claim 16, and comprising closing one or more of 
the supplemental channels in response to a decrease in the data rate. 

19. A method according to claim 1, wherein conveying the data comprises 
conveying data using IS-657 and IS-707 CDMA packet data service. 

20. Wireless communications apparatus, for use in a mobile 
telecommunications system, comprising: 

a mobile station, which is coupled to exchange data with terminal 
equipment, and which initiates a call to convey the data over a CDMA air 
interface; and 

a base station, which communicates with a GSM network service node to 
establish a data link responsive to the call initiated by the mobile station, and 
which conveys the data between the mobile station and the network over the 
data link. 

21. Apparatus according to claim 20, wherein the service node comprises a 
GPRS node, and wherein the base station transfers the data via the GPRS node 
using a GPRS communications protocol. 

22. Apparatus according to claim 21, wherein the GPRS node comprises a 
SGSN, with which the base station communicates via a GSM Gb interface. 

23. Apparatus according to claim 20, wherein the data are transferred over 
the data link as a GSM operator-specific service. 

24. Apparatus according to claim 23, wherein the GSM network node 
comprises a GSM service control point, which communicates with a switching 
center via an operator-specific service interface. 

25. Apparatus according to claim 23, wherein the mobile station 
communicates with a home location register via a GSM unstructured 
supplementary service data interface. 

26. Apparatus according to claim 23, wherein the service control point 
communicates with a switching center via a GSM customized applications for 
mobile network enhanced logic interface. 
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27. Apparatus according to claim 20, wherein the data link comprises a 
2 direct connection between the base station and the network. 

28. Apparatus according to claim 27, wherein the data are transferred over 
2 the direct connection substantially without passing through the service node. 

29. Apparatus according to claim 20, wherein the air interface is based 
2 substantially on an IS-95 CDMA air interface standard. 

30. Apparatus according to claim 29, wherein the data are conveyed over the 
2 air interface at a variable rate, responsive to a volume of the data. 

31. Apparatus according to claim 30, wherein the air interface comprises a 
2 fundamental channel for conveying the data and signaling thereover, and one 

or more supplemental channels which are opened responsive to the data 
4 volume to carry the data. 

32. Apparatus according to claim 31, the one or more supplemental channels 
2 comprise a different number of channels in forward and reverse directions 

between the mobile station and base station. 

33. Apparatus according to claim 31, and wherein one or more of the 
2 supplemental channels are closed in response to a decrease in the data rate. 



34. Apparatus according to claim 29, wherein the air interface operates 
2 substantially in accordance with IS-657 and IS-707 CDMA packet data service. 
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